PT-2004-1873 · Samba · Samba

Published 2004-09-14 · Updated 2018-10-30 · CVE-2004-0808

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Samba versions 3.0.6 and earlier

Description The issue is a denial of service flaw that occurs when the process logon packet function in the nmbd server does not properly validate the size of a UDP packet. This happens when an attacker sends a malformed packet with a SAM UAS CHANGE request, claiming a large number of structures but containing a smaller number, causing the daemon to reference memory outside of the packet and possibly crash. This results in a loss of availability for Samba's nmbd daemon.

Recommendations For Samba versions 3.0.6 and earlier, consider disabling the process logon packet function or restricting the handling of SAM UAS CHANGE requests until a fix is available. Additionally, ensure proper validation of packet sizes to prevent the daemon from referencing memory outside of the packet. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2004-0808

RHSA-2004:467

Affected Products

Samba

References · 15

• http://gentoo.org/security/en/glsa/glsa-200409-16.xml · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0808 · Vendor Advisory
• http://mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:092 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2004-0808 · Vendor Advisory
• http://idefense.com/application/poi/display?id=138&type=vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0808 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2004-0808 · Vendor Advisory
• http://trustix.net/errata/2004/0046 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2004-467.html · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10344 · Note
• http://marc.info/?l=bugtraq&m=109509335230495&w=2 · Note
• http://marc.theaimsgroup.com/?l=bugtraq&m=109509335230495&w=2 · Note
• http://marc.theaimsgroup.com/?l=bugtraq&m=109526231623307&w=2 · Note
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873 · Patch, Vendor Advisory
• http://marc.info/?l=bugtraq&m=109526231623307&w=2 · Note